$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: eQLY2H4D4V6xjN0+M4zhdv4WyO5WeGWFKODumeZVmSM= Subject key identifier: 55:1E:B9:D3:03:D2:F0:43:66:E1:5E:86:1E:27:08:C9:7A:42:A8:E9 Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 78613B63ACE2D1557B36118F4E2F566180B84E75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 09:06:56 +0000 Manifest this update: Fri 25 Sep 2026 09:01:56 +0000 Manifest next update: Sat 26 Sep 2026 11:54:56 +0000 Files and hashes: 1: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: 9bsC0gSXa1ZHZTB4WekUhDucZEIibSrq2s2LYnCUoAQ=) 2: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 3: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) 4: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 5: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 6: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 7: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 8: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 9: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 10: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:3b:63:ac:e2:d1:55:7b:36:11:8f:4e:2f:56:61:80:b8:4e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Sep 25 09:01:56 2026 GMT Not After : Sep 26 11:54:56 2026 GMT Subject: CN=551EB9D303D2F04366E15E861E2708C97A42A8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:b0:52:9c:28:44:b5:e9:fd:ff:f8:b2:40: 0d:8f:4c:14:ac:76:b0:8d:83:96:8e:e8:f1:6b:39: 13:bc:9d:95:0e:75:c6:fa:a2:0d:f6:c7:1d:f9:1b: fd:8c:ad:c7:9e:87:00:f2:78:d2:5b:34:2f:42:8b: b7:5b:05:c4:80:e3:20:d6:b4:93:88:c0:1c:11:a6: 39:89:c3:9d:e2:9d:54:3b:de:f8:32:c9:0d:03:02: 4a:f7:42:ab:aa:94:1e:50:e7:6e:1b:70:c9:bc:c1: c5:c5:41:74:22:68:67:21:31:b1:b7:f2:e4:ac:7b: de:1b:f3:6d:10:2d:28:dc:d6:55:f9:28:0a:f7:e9: 2f:fc:02:01:cb:bd:04:22:57:bd:9a:d8:b3:a3:0e: eb:13:c2:68:20:70:4b:25:3a:fc:02:d3:3d:8d:6f: bd:48:ec:72:c2:fb:ed:6c:60:ee:9f:76:fd:23:ac: 98:e0:78:51:fe:04:25:5d:24:a9:2a:df:e7:c0:dd: 65:4e:15:4e:dd:63:44:dd:bb:2b:d1:7f:19:f0:3d: 78:93:57:4b:6c:23:5c:fe:ea:48:23:49:33:29:17: 36:a1:36:e2:8f:a8:1b:a3:e4:cc:1a:7e:b4:b0:6f: b5:91:98:66:7e:c9:88:e1:34:08:9c:e5:b2:68:b1: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:B9:D3:03:D2:F0:43:66:E1:5E:86:1E:27:08:C9:7A:42:A8:E9 X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fd:93:30:9e:40:11:a2:bf:71:01:d9:63:21:55:ce:42:6f: 11:f5:6a:c2:1c:fb:46:65:d1:24:c7:e7:53:be:bd:64:d0:51: f4:73:41:59:8f:31:28:af:7c:5c:bd:f0:ca:3c:a6:73:6e:1a: ab:15:bf:96:57:53:ae:54:4d:ef:2c:d9:66:75:85:80:02:64: e6:80:03:9b:04:2b:dd:3d:a5:a2:a8:ed:c4:88:6a:d2:ba:0e: 9c:ab:b3:2e:dc:cb:5f:cb:8b:ec:c3:08:06:bc:01:13:bc:cc: 1f:51:7c:84:96:82:b0:de:48:4d:c5:b1:31:ae:80:cc:da:19: 40:5f:35:f1:c0:c0:de:a5:e5:f5:8b:79:fe:e0:19:b7:9f:ea: e6:75:c5:67:3f:06:92:11:83:e3:32:f4:9f:7a:69:a1:f5:98: 13:66:b5:88:71:10:18:56:8d:2a:6b:e4:59:f5:99:7b:f4:85: 54:50:1e:a2:51:d6:06:71:9b:a1:14:05:a0:f5:14:39:a5:f2: f8:3c:d4:cc:3d:09:b3:0a:34:03:aa:28:1d:d8:f5:70:09:d6: e0:c3:e4:bd:64:a1:e0:09:6a:28:88:5c:f9:d7:ca:00:d7:ff: 3a:83:73:90:7b:48:0d:0d:34:c2:34:5f:af:8a:61:bc:a8:55: c2:be:0c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGE7Y6zi0VV7NhGPTi9WYYC4TnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA5MjUwOTAxNTZaFw0yNjA5MjYxMTU0NTZaMDMxMTAvBgNV BAMTKDU1MUVCOUQzMDNEMkYwNDM2NkUxNUU4NjFFMjcwOEM5N0E0MkE4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtLBSnChEten9//iyQA2PTBSs drCNg5aO6PFrORO8nZUOdcb6og32xx35G/2MrceehwDyeNJbNC9Ci7dbBcSA4yDW tJOIwBwRpjmJw53inVQ73vgyyQ0DAkr3QquqlB5Q524bcMm8wcXFQXQiaGchMbG3 8uSse94b820QLSjc1lX5KAr36S/8AgHLvQQiV72a2LOjDusTwmggcEslOvwC0z2N b71I7HLC++1sYO6fdv0jrJjgeFH+BCVdJKkq3+fA3WVOFU7dY0TduyvRfxnwPXiT V0tsI1z+6kgjSTMpFzahNuKPqBuj5MwafrSwb7WRmGZ+yYjhNAic5bJosXfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVR650wPS8ENm4V6GHicIyXpCqOkwHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb9kzCeQBGiv3EB2WMhVc5CbxH1asIc+0Zl 0STH51O+vWTQUfRzQVmPMSivfFy98Mo8pnNuGqsVv5ZXU65UTe8s2WZ1hYACZOaA A5sEK909paKo7cSIatK6Dpyrsy7cy1/Li+zDCAa8ARO8zB9RfISWgrDeSE3FsTGu gMzaGUBfNfHAwN6l5fWLef7gGbef6uZ1xWc/BpIRg+My9J96aaH1mBNmtYhxEBhW jSpr5Fn1mXv0hVRQHqJR1gZxm6EUBaD1FDml8vg81Mw9CbMKNAOqKB3Y9XAJ1uDD 5L1koeAJaiiIXPnXygDX/zqDc5B7SA0NNMI0X6+KYbyoVcK+DFE= -----END CERTIFICATE-----Generated at Fri Sep 25 22:19:50 2026 by rpki-client